CVE-2013-4952

Elemata CMS RC 3.0 is affected by CVE-2013-4952: a SQL injection in functions/global.php allowing remote attackers to execute arbitrary SQL via the id parameter. The issue is network-exploitable with no authentication (CVSSv2: AV:N/AC:L/Au:N/C:P/I:P/A:P; base score 7.5). Impact is partial confide...